Export Compliance


As a leader in network visibility and network recording, Endace is committed to complying with export control laws and regulations globally. We work closely with our partners to prevent the transfer of products, goods, hardware, software or materials (collectively, products) and technology to prohibited countries or end-users.

All Endace employees, resellers, distributors and channel partners (collectively, partners) are required to comply with this policy. Endace may also require its resellers, distributors, channel partners and/or end-users to sign Endace’s export compliance certificate at any time and/or in connection with any proposed transaction.

Our commitment

Endace is committed to preventing illegal export and re-export of its products and technology, and to adhering to global export control laws and regulations. In addition to this export compliance policy, Endace’s export compliance programme includes:

Because of the fundamental importance of complying with all applicable export control laws, Endace employees or partners who violate export control laws or this policy will be subject to appropriate disciplinary action.

Endace encourages its employees and partners to report any actions that may be in violation of applicable law or any of Endace’s policies.

Endace does not retaliate against individuals for asking questions, raising concerns about compliance issues, or reporting possible misconduct. Sound export control practices underscore Endace’s commitment to ethical business behaviour and compliance with applicable laws and regulations.

Export control basics

Many countries and intergovernmental organizations, including the United States, the United Kingdom, the European Union and the United Nations, have implemented export control laws that are designed to protect national security interests, prevent terrorism, and stem the proliferation of weapons of mass destruction. In general, these laws determine what can be exported, to whom it can be exported, for what use it can be exported and whether prior approval from the host-country government (in the form of an export license) is required before the export or re-export takes place.

Export includes more than just physical shipments. Export includes electronic transmission, for example email, of software or technology, and transfer or release of technology to foreign nationals within a country. No sale is required for an export to occur.

Sanctions under law can be broad and geographically focused, or targeted on specific individuals, entities or end-uses.

Laws that govern the export and re-export of Endace products and technology include:

Export control considerations

Whether or not an Endace product can be sold to a particular purchaser requires consideration of a variety of factors, including the destination, the end-use, the end-user and any risk of diversion. Endace personnel, resellers, distributors and channel partners must satisfy themselves as to the following:

  • Where is the product or technology going?
  • Who will receive or have access to the product or technology?
  • What is the intended end-use for the product or technology?
  • Are there any red flags otherwise indicating a risk of diversion to a prohibited country, person or end-use?

Prohibited countries

We take several different sources into account in our assessment of which countries to put on our export blacklist. The countries currently on Endace’s export blacklist are:




Central African Republic









Myanmar (Burma)

North Korea









No Endace products will be exported or re-exported to any of the prohibited countries listed above or where we, or our employees or partners, suspect that the ultimate destination is a prohibited country.

Restricted persons/entities

Governments also maintain various lists of certain restricted persons and entities throughout the world with whom export and re-export are generally prohibited. Restricted parties/entities include those listed in the lists available at the following links (note these are updated often so it is important to check the relevant website regularly):

No Endace products or technology will be exported or re-exported to any restricted parties or where we, or our employees or partners, suspect that the ultimate recipient is a restricted party.

Prohibited end-uses

Endace products and technology may not be used, directly or indirectly, for prohibited end uses. This includes, but is not limited to, the design, development, manufacture, construction, operation, production, use or other activities related to the following:

  • nuclear devices and components of such devices
  • missiles
  • chemical and biological weapons
  • technology relating to maritime nuclear propulsion plants
  • exploration or production for deepwater Arctic offshore or shale projects that have the potential to produce oil or gas in the Russian Federation.

No Endace products will be exported or re-exported where we, or our partners, suspect that our products, software or technology may be intended for use in any prohibited end-uses.

Export control compliance procedures

Endace employees and partners must undertake comprehensive due diligence and screening of customers and end-users, and potential customers and end-users, of Endaces products and technology. Endace employees and partners must follow the following procedure to determine compliance with export control requirements.

Step 1: Classification of products and technology

  • All Endace products and technology must have an Export Control Classification Number (ECCN)

Step 2: Screening for prohibited countries/restricted parties or end-uses

  • Endace employees and partners must conduct due diligence of the potential customer and end-users and any intermediary parties
  • Any suspicious outcomes will be directed to Endace’s export compliance department at [insert email address] and the order must be immediately placed on hold

Step 3: Check for any additional red flags prior to shipment

  • Endace employees and partners must check for any red flags (examples below) at the time the order is received and also again prior to shipment
  • No shipments will occur unless and until any red flags are investigated and cleared

Step 4: Record keeping

  • Endace employees and partners must ensure records concerning export and re-export transactions are kept for the minimum amount of time required by law.
  • Endace also maintains and updates its approved customer, end-user and prohibited country lists on a regular basis
  • the buyer’s or end user’s name or address is similar to that of one of the parties found on a restricted parties list
  • when questioned, the buyer is evasive or unclear about whether the product is for domestic use, for export, or for reexport
  • the technical capability or end-use is incompatible with the nature of the end-user’s business
  • the buyer is unfamiliar with the product's performance characteristics but still wants the product
  • routine installation, training, or maintenance services are declined
  • delivery dates are vague, or deliveries are planned for out of the way destinations
  • a freight forwarding firm is listed as the product's final destination
  • the shipping route is abnormal for the product and destination
  • packaging is inconsistent with the stated method of shipment or destination.
  • the buyer’s or end user’s website appears suspicious
  • the end-user has little to no business background
  • the buyer wants to pay cash for a very expensive item which would usually be purchased on credit

Red flags

Endace employees and partners must be alert for any abnormal circumstances in a transaction that indicate that the export may be destined for an inappropriate end-use, end-user, or destination (red flags). Red flags includes:

Any transaction involving Endace products that raises red flags must be placed on hold immediately. Questions regarding the legitimacy of any transaction should be referred to legal@endace.com.


If you have any questions in relation to this policy, please contact us at legal@endace.com.